176 to 200 of 1,162 ISO/IEC 27001 Jobs in the UK

Security Architect & Engineering Lead Department: IT Infrastructure Employment Type: Permanent - Full Time Location: City, London Reporting To: Head of Information Security Compensation: £75,000 / year Description We are looking for a senior, hands-on Cyber Security Architect & Engineering Lead to help shape and strengthen our future security architecture … exposure management, using business risk, exploitability, attack-path context and threat intelligence to prioritise remediation. Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance and other regulatory or contractual obligations. Provide clear, risk-based technical advice to senior leaders, project ...

technical capability. Skills, Knowledge and ExpertiseEssentialProfessional experience delivering client-facing penetration tests across web applications, APIs, and internal or external network infrastructure, independently and / or as part of a team. Strong manual testing capability and sound judgement in selecting and using automated tools, with practical experience of Kali … script or automate tasks using Python, PowerShell, Bash, or a comparable language. Good knowledge of modern web architecture, common web and API vulnerabilities, TCP / IP, Windows and Linux security, and Active Directory and Microsoft Entra ID attack paths. Experience delivering, or the ability to deliver, wider technical assessments ...

growing at an incredible rate. Key Responsibility: Support the development, implementation, and ongoing maintenance of the Information Security Management System (ISMS) aligned to ISO 27001 Implement and enforce information security policies, standards, and procedures across the organisation Conduct security risk assessments, ensuring risks are identified, assessed … vulnerabilities and audit findings Monitor the threat landscape and coordinate responses to emerging risks and vulnerabilities Support internal and external audits, including ISO 27001 certification and surveillance activities Manage third-party and supplier security risk assessments and assurance processes Work with IT and project teams ...

lead on security compliance activities, coordinate responses to security incidents, deliver engaging awareness programmes and support alignment with recognised frameworks including ISO 27001 and the NIST Cybersecurity Framework . Key Responsibilities Lead IT security compliance activities, supporting alignment with ISO 27001 … external partners. Good Microsoft 365 and digital skills. Commitment to continuous professional development and creating an inclusive workplace. Desirable Relevant Cyber Security and / or Information Governance qualification. CompTIA Security+ certification. CISSP (Certified Information Systems Security Professional) certification. Experience using Microsoft 365 security and compliance tools, including Purview, Defender ...

optimized for both performance and cost. Key Responsibilities Architect, implement, and maintain cloud infrastructure to support rapid product growth. Prepare infrastructure for SOC 2 / ISO 27001 audits, aligning with customer expectations. Build and maintain CI / CD pipelines for backend, frontend, and data … Automation : Strong skills in Python or Bash for automation and tooling. Experience 4–7 years of relevant experience, ideally including startup or high‐growth / high‐load environments . Proven track record of owning infrastructure end‐to‐end — from architecture through production support. Experience implementing reliability, security, and compliance ...

develop our Consulting Practice. You’ll continue to lead and personally deliver complex client engagements across areas such as CAF, ISO 27001 (including full end-to-end implementation), ISO 42001, NIST CSF and Cyber Incident Exercising, advising clients on governance, risk and assurance challenges. … client engagements. You’ll have strong hands-on experience across governance, risk and assurance frameworks, with particular depth across areas such as CAF, ISO 27001 and NIST, and the ability to take clients through complex programmes from assessment through to implementation and improvement. But technical ...

SECURITY & COMPLIANCE LEAD Hours Full-time, 9:30am – 5.30pm with flexibility required to support system changes, upgrades and critical incidents where necessary. Department IT / Risk & Compliance The Role The Cyber Security & Compliance Lead is responsible for defining, delivering, and continuously improving the firm’s cyber security, information security … risk roles. Experience operating at a senior or lead level within a professional services or regulated environment. Strong understanding of security frameworks (e.g. ISO 27001, NIST, Cyber Essentials, GDPR). Experience managing cyber risk, audits, and compliance programmes. Experience handling security incidents and leading response activities. ...

security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber … information security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing ...

sectors, ensuring high-quality outcomes and practical recommendations 3. Act as a subject matter expert across recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF and Defence Cyber Certification requirements 4. Design and implement governance frameworks, policies, processes and controls that help clients manage … Risk and Compliance, ideally within cyber security, information security or technology risk 2. Good working knowledge of recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF, Cyber Essentials and related assurance or certification schemes 3. Experience leading risk assessments, control reviews, audit preparation, compliance ...

business through driving innovation, scalability and operational excellence across our cloud-based services and ensures that the infrastructure supports business growth and security / compliance requirements. You will lead cross-functional teams, manage vendor relationships and ensure the reliability, performance, availability and efficiency of cloud services in a fast … execute a cloud strategy that supports scalability, cost efficiency and business continuity while aligning supporting capabilities (monitoring, alerting, tooling), company objectives and Technology / Product roadmaps. Work with Senior Leadership and key stakeholders to align the infrastructure strategy with the overall business objectives and develop a strategic roadmap ensuring ...

skills.Ability to communicate complex security matters in business terms.Strong organisational, coordination and problem-solving capabilities. Qualifications & Professional Membership CISSP, CISM, CRISC, ISO / IEC 27001 or equivalent recognised security qualification.Professional registration or accreditation desirable.Membership of a recognised professional body.Evidence of continuing professional development. ...

compliance and secure our scaling global operations. Acting as the authoritative voice on internal information security, you will lead the evolution of our ISO 27001:2022 management system and serve as an essential partner to our business operations. This high-impact, individual contributor position is designed … ambitious professional looking to own our governance roadmap and influence senior stakeholders. What you'll be doing: Owning and continuously improving our ISO 27001:2022 Information Security Management System (ISMS) to ensure robust compliance. Designing and executing comprehensive internal audit schedules to verify adherence to security ...

maintain and administer our key security platforms, support client-facing security assurance activities, and help strengthen Law Debenture's security posture ahead of ISO 27001 certification. Main Responsibilities: Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments.Monitor and respond to security … Copilot and AI security technologiesCISSP, CISM, CompTIA Security+ or equivalent certificationYour RewardCompetitive salary with performance bonus schemeGenerous pension contributionFull healthcare coverHealth cash planLife assuranceBuy / sell annual leave schemeAdditional InformationPeople who thrive at LawDeb make the most of this foundation to grow themselves, help us improve and have ...

testing, supplier security and incident response. What You’ll Be Doing Provide assurance against contractual security obligations for product and service deliverables, including ISO 27001, CE+ and DCC. Deliver security strategies, policies, management plans, procedures and governance in accordance with relevant frameworks and industry standards. … Audit Reports, and Incident & Recovery Plans. Experience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standards. Experience facilitating, coordinating and directing ITHCs, including Security Requirements Traceability Matrix or Scoping Documents and prioritisation ...

services such as Intune, Entra ID, Purview, Conditional Access and endpoint security, while leading improvement initiatives, driving compliance with frameworks such as ISO 27001 and Cyber Essentials, and acting as a senior technical reference point and mentor within the ICT team. Responsibilities Own the engineering, architecture … code solutions (e.g. PowerShell, Microsoft Graph API, Terraform) to improve consistency, efficiency, and compliance. Ensure alignment with key security and compliance frameworks (including ISO 27001, GDPR, Cyber Essentials and relevant government standards), maintaining governance artefacts and technical standards documentation. Act as a senior technical reference point ...

sales cycle.* Engage with CISOs, security architects, and IT leaders to discuss cybersecurity strategy, industry trends and modern security architectures.* Produce high-quality RFP / RFI responses, security questionnaires and technical documentation.* Collaborate with Product Management and Engineering to ensure successful solution design, implementation and customer success.* Build trusted … occasional evenings or weekends when required.**Required Qualifications*** 5+ years' experience in technical pre-sales or solution engineering across cybersecurity, networking, Cloud or SASE / SSE.* Strong knowledge of SASE, SSE, Zero Trust, SD-WAN, NGFW, NAC, ZTNA, CASB, SWG, DLP and cloud security.* Solid understanding of networking technologies ...

levels and influence outcomes in support of enterprise projects. You will be confident working across the major information security frameworks and standards, including ISO 27001, NIST and SOC 2, and able to shape risk, compliance and control decisions in a way that keeps both … across information security governance, risk management, compliance and audit, with a demonstrable track record of delivered outcomes. Practical implementation experience with CIS Controls, ISO 27001 or equivalent frameworks within live operating environments, including the judgement required to apply them proportionately. Sufficient technical understanding to engage credibly ...

demonstrated equivalent expert-level skill.Microsoft Certified: Azure Solutions Architect Expert — required, or clearly demonstrated equivalent expert-level skill.Google Professional Cloud Architect — strongly preferred.TOGAF 9 / 10 or equivalent enterprise architecture certification — beneficial.FinOps Certified Practitioner — beneficial.Adjacent Technical Skills (Beneficial, Not Required)Depth in the specialist area above is mandatory. Experience … following adjacent domains is a strong plus and will be valued in candidate evaluation, since it enables broader solution ownership across engagements.Networking (routing / switching, SD-WAN) given the centrality of hybrid connectivity to this role.Virtualization platforms (VMware, Red Hat OpenShift / OpenStack) as common migration source environments.Security ...

provide assurance against all elements of contractual security obligations for product and service deliverables, as well as information and cybersecurity certifications such as ISO 27001, CE+, and DCCEnsure the delivery of relevant technical, framework and contract compliant governance, security strategies, policies, management plans, procedures, and processes … Compliance & Audit Reports, and Incident & Recovery PlansExperience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standardsExperience in facilitating, coordinating, and directing ITHCs including, but not limited to, the writing of Security Requirements Traceability ...

provide assurance against all elements of contractual security obligations for product and service deliverables, as well as information and cybersecurity certifications such as ISO 27001, CE+, and DCC Ensure the delivery of relevant technical, framework and contract compliant governance, security strategies, policies, management plans, procedures … Audit Reports, and Incident & Recovery Plans Experience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standards Experience in facilitating, coordinating, and directing ITHCs including, but not limited to, the writing of Security Requirements ...

Asia Information Security Management System (ISMS) across offices in Hong Kong and Beijing. The position will play a key role in maintaining ISO 27001 certification, supporting governance, risk and compliance activities, and ensuring alignment between local regulatory requirements and global security standards Client Details Our client … operation and continual improvement of the Asia ISMS. Maintain information security policies, risk registers, incident registers and exception registers. Coordinate ISO 27001 internal and external audits and oversee remediation activities. Prepare security metrics and management reports for governance meetings. Support information security awareness and training initiatives. ...

regularly assessed through external and internal audits. You will ensure that the organisation is fully compliant with the required Information Security Standards including ISO 27001, Cyber Essentials, Cyber Essentials Plus, NIST and GovAssure. This includes the responsibility for all of the control documentation and audit process … updated in reasonable timeframes to mitigate against new risks.Responsible for making sure that the organisation is compliant with Information Security Standards (e.g. ISO 27001), ensuring all governance and audit requirements are undertaken.Ensure that the organisation is appropriately protected in line with business needs against information ...

need as an Operational Technology (OT) Cyber Security Consultant 25 years' experience within Operational Technology or Industrial Cyber Security. Experience with OT / ICS environments including SCADA, DCS, PLCs or RTUs . Understanding of Industrial IoT (IIoT) and industrial communications. Knowledge of OT cyber risk, security architecture and monitoring. … Experience within energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum ...

need as an Operational Technology (OT) Cyber Security Consultant 25 years' experience within Operational Technology or Industrial Cyber Security. Experience with OT / ICS environments including SCADA, DCS, PLCs or RTUs . Understanding of Industrial IoT (IIoT) and industrial communications. Knowledge of OT cyber risk, security architecture and monitoring. … Experience within energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum ...

need as an Operational Technology (OT) Cyber Security Consultant 25 years' experience within Operational Technology or Industrial Cyber Security. Experience with OT / ICS environments including SCADA, DCS, PLCs or RTUs . Understanding of Industrial IoT (IIoT) and industrial communications. Knowledge of OT cyber risk, security architecture and monitoring. … Experience within energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum ...